This vulnerability involves an out of bounds read in the Dawn component of Google Chrome on Windows platforms before version 148.0.7778.216. Exploitation requires a remote attacker to deliver a specially crafted HTML page that can cause Chrome to leak data across origin boundaries, potentially exposing sensitive information. The issue is recognized as high severity by Chromium security. No CVSS score or explicit remediation level is provided, and the vendor advisory link is present but does not specify patch status within the provided data.

Successful exploitation could result in unauthorized disclosure of cross-origin data, potentially exposing sensitive information from other web origins to an attacker. There is no indication of known exploits in the wild at this time. The impact is limited to information leakage rather than code execution or system compromise.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Users should update Google Chrome to version 148.0.7778.216 or later once available to address this vulnerability. No additional mitigation steps are specified in the provided data.